* master: (72 commits)
  Release slapos.cookbook (1.0.217)
  software/theia: use a different storage-path for password
  software/slapos-master: expose random_activity_priority argument of testrunner
  slapos.recipe.random: allow to use a character twice in a password
  slapos.recipe.random: use more characters to generate password
  slapos.recipe.random: increase default password size to 16
  ...
  stack/erp5: expose random_activity_priority argument of testrunner
  version up: slapos.recipe.build 0.50, sslapos.recipe.cmmi 0.18
  couchdb, erlang, membase, spidermonkey: move to unstable
  mariadb: build RocksDB without fallocate
  version up: groonga 11.0.9, mroonga 11.09, groonga-normalizer-mysql 1.1.5
  version up: MariaDB 10.3.32/10.4.22
  mariadb: small cleanup
  erp5: Add oic library for OpenIdConnect
  component/tcl: Use software release provided zlib
  software/theia: Fix password leak in authentication promise
  software/theia: version up 1.20.0
  component/trafficserver: fix LuaJIT integration
  software/kvm: fix TestDiskDevicePathWipeDiskOndestroy test
  ...

See merge request nexedi/slapos!1091

This will force a password reset

Include the changes from 0b7511b4 (stack/erp5: expose random_activity_priority
argument of testrunner, 2021-11-22) to customized profiles from slapos
master

By setting this in the test suite configuration, we can force ERP5 tests
to use random priorities for activity processing.

The intended usage is to set this to an empty string, in which case
ERP5's runUnitTest chooses a random value for the seed and prints the
chosen value. It may also be possible to use a value, to reproduce a
previous run.

https://github.com/facebook/rocksdb/commit/7291a3f813e563efbd6870465b1063a115480373
is not enough.

Anway, given how SST files are written, fallocate
is unlikely to be useful, even less on SSD.

RocksDB seems to have options to disable at runtime (see env/io_posix.cc)
but I see nothing for that in MariaDB configuration.

Steps to reproduce:

With a Btrfs partition (no specific mkfs option and for example 2GB size)
and following MariaDB configuration:

  [mysqld]
  datadir = /tmp/datadir
  disable-log-bin
  plugin-load = ha_rocksdb
  rocksdb_default_cf_options = compression=kNoCompression;bottommost_compression=kZSTD

execute the following queries with `mysql -uroot`:

> USE test;
> CREATE TABLE t(x MEDIUMBLOB) ENGINE=RocksDB;
> INSERT INTO t VALUES(repeat('.',16777215));
> INSERT INTO t SELECT x FROM t UNION ALL SELECT x FROM t;
> INSERT INTO t SELECT x FROM t UNION ALL SELECT x FROM t;
> INSERT INTO t SELECT x FROM t UNION ALL SELECT x FROM t;

Disk usage can be checked with:

> SHOW ENGINE RocksDB STATUS \G

Level    Files   Size     ...
------------------------- ...
  L0      1/0   144.00 MB ...
  L2      1/0   288.00 MB ...
 Sum      2/0   432.00 MB ...

and this can be compacted as follows:

> SET GLOBAL rocksdb_compact_cf='default';

> SHOW ENGINE RocksDB STATUS \G

Level    Files   Size     ...
------------------------- ...
  L0      0/0    0.00 KB  ...
  L1      0/0    0.00 KB  ...
  L2      1/0   16.28 KB  ...
 Sum      1/0   16.28 KB  ...

Now using `compsize` (on Debian, it's provided by btrfs-compsize package):

# with -DWITH_FALLOCATE=NO

$ compsize /tmp/datadir/#rocksdb/000029.sst
Type       Perc     Disk Usage   Uncompressed Referenced
TOTAL      100%       20K          20K          20K
none       100%       20K          20K          20K

# without -DWITH_FALLOCATE=NO

$ compsize /tmp/datadir/#rocksdb/000029.sst
Type       Perc     Disk Usage   Uncompressed Referenced
TOTAL      100%       35M          35M          20K
none       100%       35M          35M          20K

* Note from @jerome: We have a useless dependency to
 https://pypi.org/project/alabaster/, a sphynx theme,
 but with oic v0.15.1 it's listed as a dependency
 ( https://github.com/OpenIDC/pyoidc/blob/v0.15.1/setup.py#L89 )
 so we don't have a choice. It was fixed later
 ( https://github.com/OpenIDC/pyoidc/issues/598 )
 but after python2 support was dropped.

https://github.com/eclipse-theia/theia/blob/v1.20.0/CHANGELOG.md#v1200---11252021

Fixes 50f6a557 (component/trafficserver: build Lua plugin., 2021-11-23)
LuaJIT has to be build as shared to be referenced by trafficserver
component, because the later is already build as shared.
Also fix a missing rpath

Fixes dbd19730

The caucase binary have to be explicitly provided.

This fixes commit 79ccddeb

JSON schema uses simple string and internal process, and caddy instances are
not kept simple and are not considered future-proof.

This software can use system gcc. On test nodes we observed successful
builds when system gcc is 8.3.0 and failures with system gcc is 6.3.0:

    checking whether g++ supports C++17 features with -std=c++17... no
    checking whether g++ supports C++17 features with +std=c++17... no
    checking whether g++ supports C++17 features with -h std=c++17... no
    checking whether g++ supports C++17 features with -std=c++1z... no
    checking whether g++ supports C++17 features with +std=c++1z... no
    checking whether g++ supports C++17 features with -h std=c++1z... no
    configure: error: *** A compiler with support for C++17 language features is required.
    ...
    While:
      Installing powerdns.

The test was missing change of the generated file.

Fixes 2048ceb8

There was missing updates in the test itself.

Fixes 14d90bcd

kvm-exporter supported only disk-type=virtio, as qemuqmpclient.driveBackup
source_drive defaults to virtio0.

For disk-type=ide the source_drive found to be ide0-hd0 by query-block during
runtime, and as it's used, now such disk type is supported.

Without a shebang, supervisord refuses to run the script with the
following error:

supervisor: couldn't exec /srv/slapgrid/slappart8/etc/prerm/slapos_wipe_device_disk: ENOEXEC
supervisor: child process was not spawned

This is a fixup of 0983f1ca

Caucase binaries are required for some testing scenarios.

cls.computer_partition_root_path is filled in by super.setUpClass.

Simplify the compilation to default cmmi